Allow basic auth without username. closes #1140